Free Malware Removal Forum

by **sahem** » July 19th, 2009, 7:07 pm

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:54:59 ص, on 20/07/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Users\Saweer\Stuff\installs\CoreTemp\Core Temp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\JetAudio\JetAudio.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Real\RealPlayer\RecordingManager.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Saweer\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Texas%20Holdem%20Poker/Images/armhelper.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate1c992f9716bca36) (gupdate1c992f9716bca36) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe

--
End of file - 13328 bytes

by **Shaba** » July 22nd, 2009, 2:27 am

Hi sahem

Please download RSIT by random/random... save it to your desktop.

Double click on RSIT.exe to run it.
Please read the disclaimer... click on Continue.
RSIT will start running. When done... 2 logs files...will be produced.
The first one, "log.txt", will be maximized
The second one, "info.txt", will be minimized.

Please post both... "log.txt" and "info.txt", file contents in your next reply.
(These logs can be lengthy, so post 1 log per reply please.)

by **sahem** » July 22nd, 2009, 4:52 am

Logfile of random's system information tool 1.06 (written by random/random)
Run by Saweer at 2009-07-22 11:15:38
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 35 GB (24%) free of 143 GB
Total RAM: 2044 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:15:48 ص, on 22/07/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Saweer\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Saweer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Saweer\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Texas%20Holdem%20Poker/Images/armhelper.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate1c992f9716bca36) (gupdate1c992f9716bca36) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\STacSV.exe

--
End of file - 13080 bytes

======Scheduled tasks folder======

C:\Windows\tasks\At1.job
C:\Windows\tasks\At10.job
C:\Windows\tasks\At2.job
C:\Windows\tasks\At3.job
C:\Windows\tasks\At4.job
C:\Windows\tasks\At5.job
C:\Windows\tasks\At6.job
C:\Windows\tasks\At7.job
C:\Windows\tasks\At8.job
C:\Windows\tasks\At9.job
C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-330823194-3490735558-1199261006-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-330823194-3490735558-1199261006-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{7416979F-2C60-413D-80E2-6D064A215906}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-26 279944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-02-23 304736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-06-20 669168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-06-26 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-27 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-26 279944]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-06-20 1316136]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-04-16 178712]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-02 554288]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-09 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-11-20 488752]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-27 148888]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-02-23 185872]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09 75008]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2009-03-10 468264]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-09-11 446556]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2008-06-13 210216]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-13 13584928]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-13 92704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-03-08 39408]
"Google Update"=C:\Users\Saweer\AppData\Local\Google\Update\GoogleUpdate.exe [2009-05-06 133104]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableStatusMessages"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{19ba24e6-00e1-11de-bd65-8180313ee977}]
shell\AutoRun\command - 6phx.com
shell\open\command - 6phx.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae19cd5d-147c-11de-8f04-001e68dd1e4b}]
shell\AUTopLAY\command - ousjcb.pif
shell\AutoRun\command - ousjcb.pif
shell\EXPLore\command - ousjcb.pif
shell\open\command - ousjcb.pif

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-07-22 11:15:38 ----D---- C:\rsit
2009-07-21 02:31:42 ----D---- C:\Windows\system32\SRSLabs
2009-07-21 02:28:33 ----A---- C:\Windows\system32\stcplx.dll
2009-07-21 02:28:33 ----A---- C:\Windows\system32\stapi32.dll
2009-07-20 01:46:31 ----D---- C:\Program Files\Trend Micro
2009-07-20 00:56:26 ----D---- C:\Program Files\Sony
2009-07-19 01:29:16 ----A---- C:\Windows\system32\BtwRSupport.dll
2009-07-19 01:28:46 ----D---- C:\Windows\system32\es-MX
2009-07-19 01:28:45 ----D---- C:\Windows\system32\es-AR
2009-07-18 23:14:26 ----A---- C:\ProgramData\MobileTV.exe
2009-07-18 23:14:25 ----D---- C:\ProgramData\ENU
2009-07-18 23:14:25 ----A---- C:\ProgramData\MPV.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\Karaoke.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\hpqp.txt
2009-07-18 23:14:25 ----A---- C:\ProgramData\Games.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\DVD.exe
2009-07-18 23:13:27 ----A---- C:\ProgramData\hpqp.ini
2009-07-18 16:30:41 ----D---- C:\Program Files\Common Files\LightScribe
2009-07-18 12:35:36 ----D---- C:\Program Files\DIFX
2009-07-15 13:36:19 ----A---- C:\Windows\system32\t2embed.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\lpk.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\fontsub.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\dciman32.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\atmfd.dll
2009-07-15 01:46:01 ----D---- C:\Program Files\Common Files\Totem Shared
2009-07-15 01:45:15 ----D---- C:\Program Files\MP3Dancer
2009-07-09 04:29:31 ----D---- C:\Program Files\Common Files\COWON
2009-07-09 04:29:29 ----D---- C:\Program Files\JetAudio
2009-07-09 04:28:34 ----D---- C:\Users\Saweer\AppData\Roaming\InstallShield
2009-07-05 17:23:49 ----D---- C:\Program Files\sM@D!
2009-07-05 17:20:51 ----D---- C:\Windows\system32\URTTEMP
2009-07-02 19:48:57 ----D---- C:\Program Files\Currate.com AlwaysMath.com Calculator
2009-06-28 00:16:10 ----D---- C:\Program Files\VirtualDJ
2009-06-27 01:22:17 ----A---- C:\Windows\system32\javaws.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\javaw.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\java.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\deploytk.dll
2009-06-27 00:07:27 ----A---- C:\Windows\system32\XAudio2_1.dll
2009-06-27 00:07:27 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2009-06-27 00:07:26 ----A---- C:\Windows\system32\xactengine3_1.dll
2009-06-27 00:07:26 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\D3DX9_38.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\d3dx10_38.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\XAudio2_0.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\xactengine3_0.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2009-06-27 00:07:23 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2009-06-27 00:07:22 ----A---- C:\Windows\system32\xactengine2_10.dll
2009-06-27 00:07:21 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2009-06-27 00:07:19 ----A---- C:\Windows\system32\xactengine2_9.dll
2009-06-27 00:07:18 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2009-06-27 00:07:17 ----A---- C:\Windows\system32\xactengine2_8.dll
2009-06-27 00:07:17 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2009-06-27 00:07:16 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\xinput1_3.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\xactengine2_7.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2009-06-27 00:07:13 ----A---- C:\Windows\system32\xactengine2_6.dll
2009-06-27 00:07:13 ----A---- C:\Windows\system32\xactengine2_5.dll
2009-06-27 00:07:11 ----A---- C:\Windows\system32\xactengine2_4.dll
2009-06-27 00:07:11 ----A---- C:\Windows\system32\x3daudio1_1.dll
2009-06-27 00:07:10 ----A---- C:\Windows\system32\d3dx9_31.dll
2009-06-27 00:07:09 ----A---- C:\Windows\system32\xinput1_2.dll
2009-06-27 00:07:09 ----A---- C:\Windows\system32\xactengine2_3.dll
2009-06-27 00:07:08 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-06-27 00:07:07 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-06-27 00:06:24 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-06-27 00:06:24 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-06-26 22:58:00 ----D---- C:\Program Files\scc-tds
2009-06-26 22:50:18 ----D---- C:\Program Files\MCoP

======List of files/folders modified in the last 1 months======

2009-07-22 11:15:40 ----D---- C:\Windows\Temp
2009-07-22 11:12:22 ----D---- C:\Windows\tracing
2009-07-21 23:58:03 ----D---- C:\Windows\System32
2009-07-21 23:58:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-07-21 23:58:02 ----D---- C:\Windows\inf
2009-07-21 23:24:40 ----D---- C:\Windows\Prefetch
2009-07-21 20:34:09 ----D---- C:\Windows
2009-07-21 20:33:40 ----D---- C:\ProgramData\NVIDIA
2009-07-21 20:15:59 ----D---- C:\Windows\system32\drivers
2009-07-21 20:15:55 ----D---- C:\Windows\system32\catroot
2009-07-21 20:15:49 ----SHD---- C:\System Volume Information
2009-07-21 20:13:54 ----D---- C:\Windows\system32\catroot2
2009-07-21 20:10:56 ----D---- C:\SwSetup
2009-07-21 08:28:17 ----D---- C:\Windows\Tasks
2009-07-21 08:28:06 ----D---- C:\Windows\system32\Tasks
2009-07-21 08:26:05 ----SHD---- C:\Windows\Installer
2009-07-21 07:27:59 ----AD---- C:\ProgramData\TEMP
2009-07-21 02:54:08 ----D---- C:\ProgramData\CyberLink
2009-07-21 02:53:52 ----D---- C:\Users\Saweer\AppData\Roaming\CyberLink
2009-07-21 02:32:40 ----D---- C:\Program Files\IDT
2009-07-20 01:46:31 ----D---- C:\Program Files
2009-07-19 21:38:44 ----D---- C:\Windows\system32\config
2009-07-19 21:38:42 ----D---- C:\Windows\panther
2009-07-19 21:38:41 ----D---- C:\Windows\Debug
2009-07-19 01:28:47 ----D---- C:\Windows\system32\zh-TW
2009-07-19 01:28:47 ----D---- C:\Windows\system32\zh-CN
2009-07-19 01:28:47 ----D---- C:\Windows\system32\sv-SE
2009-07-19 01:28:47 ----D---- C:\Windows\system32\ru-RU
2009-07-19 01:28:47 ----D---- C:\Windows\system32\pt-BR
2009-07-19 01:28:47 ----D---- C:\Windows\system32\pl-PL
2009-07-19 01:28:47 ----D---- C:\Windows\system32\nl-NL
2009-07-19 01:28:47 ----D---- C:\Windows\system32\nb-NO
2009-07-19 01:28:46 ----D---- C:\Windows\system32\ko-KR
2009-07-19 01:28:46 ----D---- C:\Windows\system32\ja-JP
2009-07-19 01:28:46 ----D---- C:\Windows\system32\it-IT
2009-07-19 01:28:46 ----D---- C:\Windows\system32\fr-FR
2009-07-19 01:28:45 ----D---- C:\Windows\system32\fi-FI
2009-07-19 01:28:45 ----D---- C:\Windows\system32\es-ES
2009-07-19 01:28:45 ----D---- C:\Windows\system32\en-US
2009-07-19 01:28:45 ----D---- C:\Windows\system32\de-DE
2009-07-19 01:28:45 ----D---- C:\Windows\system32\da-DK
2009-07-19 01:27:22 ----D---- C:\Windows\winsxs
2009-07-18 23:14:26 ----HD---- C:\ProgramData
2009-07-18 23:13:24 ----RSD---- C:\Windows\Fonts
2009-07-18 23:11:23 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-18 23:11:18 ----D---- C:\Program Files\HP
2009-07-18 17:07:55 ----D---- C:\Program Files\Hewlett-Packard
2009-07-18 16:30:41 ----D---- C:\Program Files\Common Files
2009-07-18 02:16:58 ----RSD---- C:\Windows\assembly
2009-07-18 01:11:25 ----D---- C:\Users\Saweer\AppData\Roaming\SUPERAntiSpyware.com
2009-07-18 01:11:21 ----D---- C:\Program Files\SUPERAntiSpyware
2009-07-18 01:08:34 ----D---- C:\Program Files\Winamp
2009-07-16 16:24:59 ----SD---- C:\Windows\Downloaded Program Files
2009-07-15 16:29:05 ----D---- C:\Program Files\Windows Mail
2009-07-14 03:17:01 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2009-07-14 03:16:03 ----D---- C:\Program Files\DVDVideoSoft
2009-07-11 14:46:10 ----D---- C:\Program Files\Mozilla Firefox
2009-07-11 14:45:28 ----D---- C:\Windows\SMINST
2009-07-11 14:45:25 ----D---- C:\Program Files\A-1 Image 4.20
2009-07-07 18:10:56 ----A---- C:\Windows\system32\mrt.exe
2009-07-05 19:06:38 ----D---- C:\Windows\registration
2009-07-05 19:05:28 ----D---- C:\Program Files\Internet Explorer
2009-06-30 22:28:22 ----D---- C:\Program Files\Google
2009-06-29 01:47:43 ----D---- C:\Users\Saweer\AppData\Roaming\IObit
2009-06-28 23:52:51 ----D---- C:\Windows\Microsoft.NET
2009-06-28 01:03:21 ----D---- C:\Program Files\Common Files\microsoft shared
2009-06-27 20:32:51 ----D---- C:\Users\Saweer\AppData\Roaming\COWON
2009-06-27 01:21:15 ----D---- C:\Program Files\Java
2009-06-27 00:05:16 ----D---- C:\Windows\Logs
2009-06-26 22:52:37 ----D---- C:\Windows\Cursors
2009-06-26 22:42:51 ----D---- C:\Windows\LiveKernelReports
2009-06-24 02:04:56 ----D---- C:\Windows\system32\LogFiles

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-04-28 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]
R2 Aspi32;Aspi32; C:\Windows\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-04-28 55640]
R2 RMCAST;RMCAST (Pgm) Protocol Driver; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-04-11 113664]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2008-08-07 34608]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-10-23 1331192]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-06-23 80424]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-06-23 81960]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-06-23 16168]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-09-04 54784]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-19 16768]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-04-17 114528]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-08-06 44576]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-09-13 7391392]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2009-03-06 140800]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2008-09-11 389120]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-06-20 200112]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 ALSysIO;ALSysIO; \??\C:\Users\Saweer\AppData\Local\Temp\ALSysIO.sys []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-10-23 1331192]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-02-06 55280]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\aestsrv.exe [2008-06-27 77824]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2008-03-18 13312]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-06-10 185089]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2008-08-07 24880]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-04-16 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-01-27 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-09-13 196608]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2009-01-12 292216]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2009-01-12 116080]
R2 Recovery Service for Windows;Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [2008-03-27 341328]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\STacSV.exe [2008-09-11 237650]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-02-07 193840]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-01-26 148832]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S2 gupdate1c992f9716bca36;Google Update Service (gupdate1c992f9716bca36); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-20 133104]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 fsssvc;Windows Live Family Safety; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-08 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-27 145184]

-----------------EOF-----------------

by **sahem** » July 22nd, 2009, 4:54 am

info.txt logfile of random's system information tool 1.06 2009-07-22 11:15:52

======Uninstall list======

-->"C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe"
-->"C:\Program Files\HP Games\Blasterball 3\Uninstall.exe"
-->"C:\Program Files\HP Games\Bricks of Egypt\Uninstall.exe"
-->"C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe"
-->"C:\Program Files\HP Games\Crystal Maze\Uninstall.exe"
-->"C:\Program Files\HP Games\Digby's Donuts\Uninstall.exe"
-->"C:\Program Files\HP Games\Diner Dash 2 Restaurant Rescue\Uninstall.exe"
-->"C:\Program Files\HP Games\Diner Dash\Uninstall.exe"
-->"C:\Program Files\HP Games\FATE\Uninstall.exe"
-->"C:\Program Files\HP Games\Fish Tycoon\Uninstall.exe"
-->"C:\Program Files\HP Games\Gem Shop\Uninstall.exe"
-->"C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe"
-->"C:\Program Files\HP Games\Magic Academy\Uninstall.exe"
-->"C:\Program Files\HP Games\Mah Jong Quest\Uninstall.exe"
-->"C:\Program Files\HP Games\My HP Game Console\Uninstall.exe"
-->"C:\Program Files\HP Games\Ocean Express\Uninstall.exe"
-->"C:\Program Files\HP Games\Peggle\Uninstall.exe"
-->"C:\Program Files\HP Games\Penguins!\Uninstall.exe"
-->"C:\Program Files\HP Games\Polar Bowler\Uninstall.exe"
-->"C:\Program Files\HP Games\Polar Golfer Pineapple Cup\Uninstall.exe"
-->"C:\Program Files\HP Games\Polar Golfer\Uninstall.exe"
-->"C:\Program Files\HP Games\Puzzle Express\Uninstall.exe"
-->"C:\Program Files\HP Games\Ricochet Lost Worlds\Uninstall.exe"
-->"C:\Program Files\HP Games\Slingo Deluxe\Uninstall.exe"
-->"C:\Program Files\HP Games\Sudoku Quest\Uninstall.exe"
-->"C:\Program Files\HP Games\Super Granny\Uninstall.exe"
-->"C:\Program Files\HP Games\Tradewinds\Uninstall.exe"
-->"C:\Program Files\HP Games\Treasure Island\Uninstall.exe"
-->"C:\Program Files\HP Games\Virtual Villagers - A New Home\Uninstall.exe"
-->"C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe"
-->MsiExec.exe /I{0F122737-72B2-4095-8B3E-7AAE753DFD3D}
7art Sky Clock © 2008 by 7art-screensavers.com-->"C:\Program Files\7art\Sky Clock\unins000.exe"
A-1 Image Screen Saver 4.20-->C:\PROGRA~1\A-1IMA~1.20\UNWISE.EXE C:\PROGRA~1\A-1IMA~1.20\INSTALL.LOG
Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
ActiveCheck component for HP Active Support Library-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.4-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81300000003}
Adobe Shockwave Player-->MsiExec.exe /X{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}
Advanced SystemCare 3-->"C:\Program Files\IObit\Advanced SystemCare 3\unins000.exe"
Ask Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Broadcom 802.11 Wireless LAN Adapter-->"C:\Program Files\Broadcom\Broadcom 802.11\Driver\bcmwlu00.exe" verbose /rootkey="Software\Broadcom\802.11\UninstallInfo" /rootdir="C:\Program Files\Broadcom\Broadcom 802.11\Driver"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}
COWON Media Center - jetAudio Plus VX-->C:\Program Files\InstallShield Installation Information\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}\setup.exe -runfromtemp -l0x0009 -removeonly
Currate.com/AlwaysMath.com Calculator-->"C:\Program Files\Currate.com AlwaysMath.com Calculator\unins000.exe"
CyberLink DVD Suite-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
CyberLink YouCam-->"C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\Setup.exe" /z-uninstall
CyberLink YouCam-->"C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\Setup.exe" /z-uninstall
edBlock Detector -->MsiExec.exe /I{309A9040-6431-47C2-B714-5D0218219105}
Eliza Dushku Screensaver 1.0-->"C:\Windows\unins000.exe"
ElizaDushkuScreenSaver-->C:\Windows\ss3unstl.exe "ElizaDushkuScreenSaver"
Eye of Horus 1.1-->C:\Program Files\EyeOfHorus\uninst.exe
FIFA 09-->"C:\Program Files\InstallShield Installation Information\{BBD66F6D-931F-4033-8925-B19B9E0598D6}\setup.exe" -runfromtemp -l0x0009 -removeonly
FLV Player 2.0 (build 25)-->C:\Program Files\FLV Player\uninst.exe
Free Studio version 4.1-->"C:\Program Files\DVDVideoSoft\Free Studio\unins000.exe"
Free YouTube to Mp3 Converter version 3.1-->"C:\Program Files\DVDVideoSoft\Free YouTube to Mp3 Converter\unins000.exe"
Google Earth Plugin-->MsiExec.exe /I{B535B621-5559-11DE-A7A1-005056806466}
Google Earth-->MsiExec.exe /X{CC016F21-3970-11DE-B878-005056806466}
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Active Support Library-->"C:\Program Files\InstallShield Installation Information\{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}\setup.exe" -runfromtemp -l0x0409 -removeonly
HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B16DA0F8-26BC-4FFC-9363-1D9F3E6C3E21}\setup.exe" -l0x9 -removeonly
HP Doc Viewer-->MsiExec.exe /I{082702D5-5DD8-4600-BCE5-48B15174687F}
HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{51E5C397-0AA0-48DD-9CB6-7259AFFDFB0A}\setup.exe" -l0x9 -removeonly
HP Help and Support-->MsiExec.exe /I{0054A0F6-00C9-4498-B821-B5C9578F433E}
HP Integrated Module with Bluetooth wireless technology 6.0.1.6204-->MsiExec.exe /X{03D1988F-469F-4843-8E6E-E5FE9D17889D}
HP MULTIPLE MODEM INSTALLER for VISTA-->MsiExec.exe /I{45A136EC-88BF-4B95-99F5-C45D3930E1CC}
HP Quick Launch Buttons 6.40 D1-->C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe -runfromtemp -l0x0009 uninst
HP QuickPlay 3.7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\Setup.exe" -uninstall
HP QuickTouch 1.00 D2-->MsiExec.exe /I{30DAA715-5032-40F9-A0AE-95C9AEBB3E3F}
HP Update-->MsiExec.exe /X{C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}
HP User Guides 0102-->MsiExec.exe /I{F48098CD-2D66-4861-85EC-DC1D4D09D5F9}
HP Wireless Assistant-->MsiExec.exe /I{A5CE7175-080D-49AC-B5A3-E7E3502428F5}
HPAsset component for HP Active Support Library-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
HPNetworkAssistant-->MsiExec.exe /I{228C6B46-64E2-404E-898A-EF0830603EF4}
IDT Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}\setup.exe" -l0x9 -remove -removeonly
Intel® Matrix Storage Manager-->C:\Windows\system32\imsmudlg.exe -uninstall
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
JMicron JMB38X Flash Media Controller-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{26604C7E-A313-4D12-867F-7C6E7820BE4C}\setup.exe" -l0x9 -removeonly
Jordan Trix 1.2-->MsiExec.exe /I{21E5928D-2A9C-472D-A801-505D6D66A99F}
Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\setup.exe" -uninstall
Learning Essentials for Microsoft Office-->MsiExec.exe /X{75F3A4B2-F6E8-434D-A2EF-DBBC016C6CB2}
LightScribe Applications-->MsiExec.exe /X{535A4F3D-06C3-446C-A2AA-DBB71EC192B8}
LightScribe System Software-->MsiExec.exe /X{4A9849CA-E11C-4F24-8BB1-97C717A1C898}
Marxio Timer 1.5-->"C:\Program Files\Marxio Timer\unins000.exe"
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Math-->MsiExec.exe /I{07043840-959A-4B0D-8825-2C533F0DDB19}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office Outlook Connector-->MsiExec.exe /I{95120000-0120-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint Viewer 2007 (English)-->MsiExec.exe /X{95120000-00AF-0409-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110401-6000-11D3-8CFE-0150048383C9}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Search Enhancement Pack-->MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft Student 2007 for Learning Essentials-->RunDll32.exe advpack.dll, LaunchINFSectionEx C:\Program Files\Learning Essentials\1.0\en\US\Microsoft Student 2007\Uninstall\Uninstall.inf,Uninstall,,,N
Microsoft Student with Encarta Premium 2008-->MsiExec.exe /I{08041881-FCA5-44A7-B863-D66037A16AAF}
Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works-->MsiExec.exe /I{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}
Mouse and Keyboard Events Recorder 1.0-->"C:\Program Files\MCoP\MKER\unins000.exe"
Mozilla Firefox (3.0.10)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MP3 Alarm Clock-->MsiExec.exe /I{0C0EB118-D9E9-4B17-A9FA-0147F8AE0E86}
MP3 Dancer-->C:\PROGRA~1\MP3DAN~1\UNWISE.EXE C:\PROGRA~1\MP3DAN~1\INSTALL.LOG
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Multimedia Builder 4.9.8-->"C:\Program Files\Multimedia Builder498\unins000.exe"
My HP Games-->"C:\Program Files\HP Games\Uninstall.exe"
Nokia Connectivity Cable Driver-->MsiExec.exe /X{6882DD11-33B8-4DEA-8305-7E765BF74BD3}
Nokia PC Connectivity Solution-->MsiExec.exe /I{0D80391C-0A72-43BB-9BC2-143F63CC111D}
Nokia PC Suite-->MsiExec.exe /I{531317A5-586A-4E36-87C1-CA823447B375}
NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
Opera 9.64-->MsiExec.exe /X{A2A60894-E3ED-46FE-9A6A-7CF7A87572A0}
Perfect Alarm Clock-->C:\Program Files\Perfect Alarm Clock\Uninstall.exe
Power2Go-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\setup.exe" -uninstall
PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
ProtectSmart Hard Drive Protection-->MsiExec.exe /X{AAD72731-807A-4B79-AE05-9190B7002B7B}
Realtek 8169 8168 8101E 8102E Ethernet Driver-->C:\Program Files\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -l0x0009 -removeonly
RemoveIT Pro v4 - SE-->C:\PROGRA~1\removeit\INCODE~1\REMOVE~1\UNWISE.EXE C:\PROGRA~1\removeit\INCODE~1\REMOVE~1\INSTALL.LOG
Sib Icon Editor-->"C:\Program Files\Sib Icon Editor\uninstall.exe"
Sony Sound Forge 8.0-->MsiExec.exe /X{767572FD-4D01-4FA3-B0A6-4B09FB2CFC37}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Underwater Picture Screensaver 1.0-->"C:\Program Files\Underwater Picture Screensaver\unins000.exe"
Uniblue SpeedUpMyPC 2009-->"C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}\SpeedUpMyPC.exe" REMOVE=TRUE MODIFY=FALSE
Uniblue SpeedUpMyPC 2009-->C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}\SpeedUpMyPC.exe
Uninstall 1.0.0.1-->"C:\Program Files\Common Files\DVDVideoSoft\unins000.exe"
Update for Microsoft Office 2007 Help for Common Features (KB963673)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {AB365889-0395-4FAD-B702-CA5985D53D42}
Update for Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {199DF7B6-169C-448C-B511-1054101BE9C9}
Update for Microsoft Office OneNote 2007 Help (KB963670)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2744EF05-38E1-4D5D-B333-E021EDAEA245}
Update for Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {397B1D4F-ED7B-4ACA-A637-43B670843876}
Update for Microsoft Office Script Editor Help (KB963671)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {CD11C6A2-FFC6-4271-8EAB-79C3582F505C}
Update for Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {80E762AA-C921-4839-9D7D-DB62A72C0726}
UpToDate-->C:\Users\Saweer\UpToDate\_uninst\uninstaller.exe
Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Driver Package - ENE (enecir) HIDClass (09/04/2008 2.6.0.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\DPInst.exe /u C:\Windows\System32\DriverStore\FileRepository\enecir.inf_1a3c82dd\enecir.inf
Windows Essentials Media Codec Pack 2.2c-->C:\Program Files\Essentials Codec Pack\uninst.exe
Windows Live Call-->MsiExec.exe /I{F6BD194C-4190-4D73-B1B1-C48C99921BFE}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{C6CA8874-5F22-4AF0-9BE3-016BF299C536}
Windows Live Family Safety-->MsiExec.exe /X{76CD2979-09C0-493A-84B3-8FD97EF4BCEA}
Windows Live ID Sign-in Assistant-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
Windows Live Mail-->MsiExec.exe /I{63C1109E-D977-49ED-BCE3-D00D0BF187D6}
Windows Live Messenger-->MsiExec.exe /X{0AAA9C97-74D4-47CE-B089-0B147EF3553C}
Windows Live Movie Maker Beta-->MsiExec.exe /X{6F6594CB-DA1B-4FFB-B397-CACE3D5F668B}
Windows Live Photo Gallery-->MsiExec.exe /X{3C52E7DA-C431-4239-B66B-1BF703D5B194}
Windows Live Sync-->MsiExec.exe /X{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}
Windows Live Toolbar-->MsiExec.exe /X{995F1E2E-F542-4310-8E1D-9926F5A279B3}
Windows Live Upload Tool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Windows Live Writer-->MsiExec.exe /X{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
لعبة طرنيب 41 - الإصدار التجريبي-->C:\Windows\IsUninst.exe -fc:\games\tarneeb\Uninst.isu

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: Sahem
Event Code: 2
Message: Bluetooth HID device (6a:4d:d5:11:66:01) either went out of range or became unresponsive.
Record Number: 355914
Source Name: HidBth
Time Written: 20090629142904.706800-000
Event Type: Warning
User:

Computer Name: Sahem
Event Code: 46
Message: Crash dump initialization failed!
Record Number: 355907
Source Name: volmgr
Time Written: 20090629142837.368488-000
Event Type: Error
User:

Computer Name: Sahem
Event Code: 46
Message: Crash dump initialization failed!
Record Number: 355904
Source Name: volmgr
Time Written: 20090629142830.769646-000
Event Type: Error
User:

Computer Name: Sahem
Event Code: 4001
Message: WLAN AutoConfig service has successfully stopped.

Record Number: 355900
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20090629043113.106683-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: Sahem
Event Code: 10002
Message: WLAN Extensibility Module has stopped.

Module Path: C:\Windows\System32\bcmihvsrv.dll

Record Number: 355896
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20090629043111.659683-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: Saweer-PC
Event Code: 10
Message: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Record Number: 292
Source Name: Microsoft-Windows-WMI
Time Written: 20090216125543.000000-000
Event Type: Error
User:

Computer Name: Saweer-PC
Event Code: 10
Message: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Record Number: 235
Source Name: Microsoft-Windows-WMI
Time Written: 20090216102414.000000-000
Event Type: Error
User:

Computer Name: Saweer-PC
Event Code: 10
Message: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Record Number: 183
Source Name: Microsoft-Windows-WMI
Time Written: 20090216060327.000000-000
Event Type: Error
User:

Computer Name: Saweer-PC
Event Code: 63
Message: A provider, OffProv11, has been registered in the Windows Management Instrumentation namespace Root\MSAPPS11 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Record Number: 108
Source Name: Microsoft-Windows-WMI
Time Written: 20090216033356.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: Saweer-PC
Event Code: 63
Message: A provider, OffProv11, has been registered in the Windows Management Instrumentation namespace Root\MSAPPS11 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Record Number: 107
Source Name: Microsoft-Windows-WMI
Time Written: 20090216033356.000000-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: Sahem
Event Code: 5032
Message: Windows Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network.

Error Code: 2
Record Number: 259598
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090710235859.723191-000
Event Type: Audit Failure
User:

Computer Name: Sahem
Event Code: 5038
Message: Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.

File Name: \Device\HarddiskVolume1\Windows\System32\drivers\aspi32.sys
Record Number: 259597
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090710235858.797191-000
Event Type: Audit Failure
User:

Computer Name: Sahem
Event Code: 5024
Message: The Windows Firewall Service has started successfully.
Record Number: 259596
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090710235853.651191-000
Event Type: Audit Success
User:

Computer Name: Sahem
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-0-0
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 3

New Logon:
Security ID: S-1-5-7
Account Name: ANONYMOUS LOGON
Account Domain: NT AUTHORITY
Logon ID: 0x471ac
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x0
Process Name: -

Network Information:
Workstation Name:
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): NTLM V1
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 259595
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090710235853.360191-000
Event Type: Audit Success
User:

Computer Name: Sahem
Event Code: 5033
Message: The Windows Firewall Driver has started successfully.
Record Number: 259594
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090710235850.516191-000
Event Type: Audit Success
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\CyberLink\Power2Go
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"OnlineServices"=Online Services
"Platform"=MCD
"PCBRAND"=Pavilion

-----------------EOF-----------------

by **Shaba** » July 22nd, 2009, 5:22 am

Uninstall this:

Ask Toolbar

Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2

Make sure you are connected to the Internet.
Double-click on mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
- Make sure the "Perform Full Scan" option is selected.
- Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

Rerun rsit.

Post:

- fresh rsit log (taken after mbam run)
- mbam log

by **sahem** » July 22nd, 2009, 10:56 am

Malwarebytes' Anti-Malware 1.39
Database version: 2477
Windows 6.0.6002 Service Pack 2

22/07/2009 05:52:45 م
mbam-log-2009-07-22 (17-52-45).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 335892
Time elapsed: 2 hour(s), 27 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\program files\mp3dancer\Effects\Bubbles.dll (Backdoor.Bot) -> Quarantined and deleted successfully.

by **Shaba** » July 22nd, 2009, 11:10 am

OK, not much there.

How much is temperature of computer at the moment?

by **sahem** » July 22nd, 2009, 11:17 am

Logfile of random's system information tool 1.06 (written by random/random)
Run by Saweer at 2009-07-22 18:08:22
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 35 GB (24%) free of 143 GB
Total RAM: 2044 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:08:32 م, on 22/07/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Users\Saweer\Stuff\installs\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Saweer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Saweer\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Texas%20Holdem%20Poker/Images/armhelper.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate1c992f9716bca36) (gupdate1c992f9716bca36) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\STacSV.exe

--
End of file - 12794 bytes

======Scheduled tasks folder======

C:\Windows\tasks\At1.job
C:\Windows\tasks\At10.job
C:\Windows\tasks\At2.job
C:\Windows\tasks\At3.job
C:\Windows\tasks\At4.job
C:\Windows\tasks\At5.job
C:\Windows\tasks\At6.job
C:\Windows\tasks\At7.job
C:\Windows\tasks\At8.job
C:\Windows\tasks\At9.job
C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-330823194-3490735558-1199261006-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-330823194-3490735558-1199261006-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{7416979F-2C60-413D-80E2-6D064A215906}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-26 279944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-02-23 304736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-06-20 669168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-06-26 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-27 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-26 279944]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-06-20 1316136]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-04-16 178712]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-02 554288]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-09 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-11-20 488752]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-27 148888]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-02-23 185872]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09 75008]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2009-03-10 468264]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-09-11 446556]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2008-06-13 210216]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-13 13584928]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-13 92704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-03-08 39408]
"Google Update"=C:\Users\Saweer\AppData\Local\Google\Update\GoogleUpdate.exe [2009-05-06 133104]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableStatusMessages"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{19ba24e6-00e1-11de-bd65-8180313ee977}]
shell\AutoRun\command - 6phx.com
shell\open\command - 6phx.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae19cd5d-147c-11de-8f04-001e68dd1e4b}]
shell\AUTopLAY\command - ousjcb.pif
shell\AutoRun\command - ousjcb.pif
shell\EXPLore\command - ousjcb.pif
shell\open\command - ousjcb.pif

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2009-07-22 15:37:48 ----D---- C:\Windows\LastGood.Tmp
2009-07-22 15:01:52 ----D---- C:\Users\Saweer\AppData\Roaming\Malwarebytes
2009-07-22 15:01:42 ----D---- C:\ProgramData\Malwarebytes
2009-07-22 15:01:42 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-22 11:15:38 ----D---- C:\rsit
2009-07-21 02:31:42 ----D---- C:\Windows\system32\SRSLabs
2009-07-21 02:28:33 ----A---- C:\Windows\system32\stcplx.dll
2009-07-21 02:28:33 ----A---- C:\Windows\system32\stapi32.dll
2009-07-20 01:46:31 ----D---- C:\Program Files\Trend Micro
2009-07-20 00:56:26 ----D---- C:\Program Files\Sony
2009-07-19 01:29:16 ----A---- C:\Windows\system32\BtwRSupport.dll
2009-07-19 01:28:46 ----D---- C:\Windows\system32\es-MX
2009-07-19 01:28:45 ----D---- C:\Windows\system32\es-AR
2009-07-18 23:14:26 ----A---- C:\ProgramData\MobileTV.exe
2009-07-18 23:14:25 ----D---- C:\ProgramData\ENU
2009-07-18 23:14:25 ----A---- C:\ProgramData\MPV.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\Karaoke.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\hpqp.txt
2009-07-18 23:14:25 ----A---- C:\ProgramData\Games.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\DVD.exe
2009-07-18 23:13:27 ----A---- C:\ProgramData\hpqp.ini
2009-07-18 16:30:41 ----D---- C:\Program Files\Common Files\LightScribe
2009-07-18 12:35:36 ----D---- C:\Program Files\DIFX
2009-07-15 13:36:19 ----A---- C:\Windows\system32\t2embed.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\lpk.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\fontsub.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\dciman32.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\atmfd.dll
2009-07-15 01:46:01 ----D---- C:\Program Files\Common Files\Totem Shared
2009-07-15 01:45:15 ----D---- C:\Program Files\MP3Dancer
2009-07-09 04:29:31 ----D---- C:\Program Files\Common Files\COWON
2009-07-09 04:29:29 ----D---- C:\Program Files\JetAudio
2009-07-09 04:28:34 ----D---- C:\Users\Saweer\AppData\Roaming\InstallShield
2009-07-05 17:23:49 ----D---- C:\Program Files\sM@D!
2009-07-05 17:20:51 ----D---- C:\Windows\system32\URTTEMP
2009-07-02 19:48:57 ----D---- C:\Program Files\Currate.com AlwaysMath.com Calculator
2009-06-28 00:16:10 ----D---- C:\Program Files\VirtualDJ
2009-06-27 01:22:17 ----A---- C:\Windows\system32\javaws.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\javaw.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\java.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\deploytk.dll
2009-06-27 00:07:27 ----A---- C:\Windows\system32\XAudio2_1.dll
2009-06-27 00:07:27 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2009-06-27 00:07:26 ----A---- C:\Windows\system32\xactengine3_1.dll
2009-06-27 00:07:26 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\D3DX9_38.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\d3dx10_38.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\XAudio2_0.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\xactengine3_0.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2009-06-27 00:07:23 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2009-06-27 00:07:22 ----A---- C:\Windows\system32\xactengine2_10.dll
2009-06-27 00:07:21 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2009-06-27 00:07:19 ----A---- C:\Windows\system32\xactengine2_9.dll
2009-06-27 00:07:18 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2009-06-27 00:07:17 ----A---- C:\Windows\system32\xactengine2_8.dll
2009-06-27 00:07:17 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2009-06-27 00:07:16 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\xinput1_3.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\xactengine2_7.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2009-06-27 00:07:13 ----A---- C:\Windows\system32\xactengine2_6.dll
2009-06-27 00:07:13 ----A---- C:\Windows\system32\xactengine2_5.dll
2009-06-27 00:07:11 ----A---- C:\Windows\system32\xactengine2_4.dll
2009-06-27 00:07:11 ----A---- C:\Windows\system32\x3daudio1_1.dll
2009-06-27 00:07:10 ----A---- C:\Windows\system32\d3dx9_31.dll
2009-06-27 00:07:09 ----A---- C:\Windows\system32\xinput1_2.dll
2009-06-27 00:07:09 ----A---- C:\Windows\system32\xactengine2_3.dll
2009-06-27 00:07:08 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-06-27 00:07:07 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-06-27 00:06:24 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-06-27 00:06:24 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-06-26 22:58:00 ----D---- C:\Program Files\scc-tds
2009-06-26 22:50:18 ----D---- C:\Program Files\MCoP
2009-06-10 02:27:11 ----A---- C:\Windows\system32\mshtml.dll
2009-06-10 02:27:09 ----A---- C:\Windows\system32\ieframe.dll
2009-06-10 02:27:08 ----A---- C:\Windows\system32\iertutil.dll
2009-06-10 02:27:07 ----A---- C:\Windows\system32\wininet.dll
2009-06-10 02:27:07 ----A---- C:\Windows\system32\urlmon.dll
2009-06-10 02:27:07 ----A---- C:\Windows\system32\iedkcs32.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\jsproxy.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\ieui.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\iesetup.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\iernonce.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\ie4uinit.exe
2009-06-10 01:44:57 ----A---- C:\Windows\system32\localspl.dll
2009-06-10 01:20:56 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-07 18:04:46 ----D---- C:\Program Files\shamsanGames
2009-06-07 07:04:14 ----D---- C:\Users\Saweer\AppData\Roaming\uniblue
2009-06-07 07:03:46 ----D---- C:\Program Files\Uniblue
2009-06-07 07:01:21 ----HDC---- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
2009-06-05 03:30:01 ----D---- C:\Program Files\Common Files\PX Storage Engine
2009-06-05 03:29:56 ----D---- C:\Users\Saweer\AppData\Roaming\Winamp
2009-06-02 03:02:36 ----D---- C:\Windows\system32\eu-ES
2009-06-02 03:02:36 ----D---- C:\Windows\system32\ca-ES
2009-06-02 03:02:34 ----D---- C:\Windows\system32\vi-VN
2009-06-02 02:44:53 ----D---- C:\Windows\system32\EventProviders
2009-06-02 02:43:59 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-06-02 02:43:56 ----A---- C:\Windows\system32\SLsvc.exe
2009-06-02 02:43:56 ----A---- C:\Windows\system32\SLCExt.dll
2009-06-02 02:43:54 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-06-02 02:43:54 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-06-02 02:43:53 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-06-02 02:43:51 ----A---- C:\Windows\system32\mssrch.dll
2009-06-02 02:43:48 ----A---- C:\Windows\system32\tquery.dll
2009-06-02 02:43:47 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-06-02 02:43:47 ----A---- C:\Windows\system32\lsasrv.dll
2009-06-02 02:43:46 ----A---- C:\Windows\system32\scavenge.dll
2009-06-02 02:43:46 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-06-02 02:43:46 ----A---- C:\Windows\system32\RMActivate.exe
2009-06-02 02:43:45 ----A---- C:\Windows\system32\msi.dll
2009-06-02 02:43:44 ----A---- C:\Windows\system32\imapi2fs.dll
2009-06-02 02:43:43 ----A---- C:\Windows\system32\WscEapPr.dll
2009-06-02 02:43:43 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-06-02 02:43:43 ----A---- C:\Windows\system32\secproc_isv.dll
2009-06-02 02:43:42 ----A---- C:\Windows\system32\sysmain.dll
2009-06-02 02:43:41 ----A---- C:\Windows\system32\icardagt.exe
2009-06-02 02:43:40 ----A---- C:\Windows\system32\mf.dll
2009-06-02 02:43:40 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-06-02 02:43:39 ----A---- C:\Windows\system32\EhStorShell.dll
2009-06-02 02:43:38 ----A---- C:\Windows\system32\spreview.exe
2009-06-02 02:43:38 ----A---- C:\Windows\system32\spinstall.exe
2009-06-02 02:43:37 ----A---- C:\Windows\system32\drmv2clt.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\spwizui.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\shell32.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\secproc.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-06-02 02:43:34 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-06-02 02:43:34 ----A---- C:\Windows\system32\p2psvc.dll
2009-06-02 02:43:34 ----A---- C:\Windows\system32\mssvp.dll
2009-06-02 02:43:33 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-06-02 02:43:33 ----A---- C:\Windows\system32\mscoree.dll
2009-06-02 02:43:32 ----A---- C:\Windows\system32\mssphtb.dll
2009-06-02 02:43:32 ----A---- C:\Windows\system32\mssph.dll
2009-06-02 02:43:32 ----A---- C:\Windows\system32\imapi2.dll
2009-06-02 02:43:31 ----A---- C:\Windows\system32\sdohlp.dll
2009-06-02 02:43:31 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-06-02 02:43:30 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-06-02 02:43:30 ----A---- C:\Windows\system32\esent.dll
2009-06-02 02:43:30 ----A---- C:\Windows\system32\DevicePairing.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\wevtsvc.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\sperror.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\SLC.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-06-02 02:43:29 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\korwbrkr.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\IasMigReader.exe
2009-06-02 02:43:28 ----A---- C:\Windows\system32\wmp.dll
2009-06-02 02:43:28 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-06-02 02:43:28 ----A---- C:\Windows\system32\msshsq.dll
2009-06-02 02:43:27 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-06-02 02:43:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-06-02 02:43:27 ----A---- C:\Windows\system32\msjet40.dll
2009-06-02 02:43:27 ----A---- C:\Windows\system32\MPSSVC.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\Query.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\qmgr.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\msxml6.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\msexch40.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\diagperf.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\srchadmin.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\P2PGraph.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\ole32.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\ntdll.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\winload.exe
2009-06-02 02:43:24 ----A---- C:\Windows\system32\uDWM.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\riched20.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\msxml3.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\mmc.exe
2009-06-02 02:43:24 ----A---- C:\Windows\system32\mblctr.exe
2009-06-02 02:43:24 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\EncDec.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\dfsr.exe
2009-06-02 02:43:23 ----A---- C:\Windows\system32\RacEngn.dll
2009-06-02 02:43:23 ----A---- C:\Windows\system32\fdBth.dll
2009-06-02 02:43:22 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-06-02 02:43:22 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-06-02 02:43:22 ----A---- C:\Windows\system32\milcore.dll
2009-06-02 02:43:22 ----A---- C:\Windows\system32\kernel32.dll
2009-06-02 02:43:22 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-06-02 02:43:21 ----A---- C:\Windows\system32\spoolss.dll
2009-06-02 02:43:21 ----A---- C:\Windows\system32\schedsvc.dll
2009-06-02 02:43:21 ----A---- C:\Windows\system32\CertEnroll.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\msvcp60.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\msjtes40.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\fsquirt.exe
2009-06-02 02:43:20 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-06-02 02:43:19 ----A---- C:\Windows\system32\infocardapi.dll
2009-06-02 02:43:19 ----A---- C:\Windows\system32\gpedit.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\WinSAT.exe
2009-06-02 02:43:18 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-06-02 02:43:18 ----A---- C:\Windows\system32\mstext40.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\Magnify.exe
2009-06-02 02:43:18 ----A---- C:\Windows\system32\es.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\advapi32.dll
2009-06-02 02:43:17 ----A---- C:\Windows\system32\WMPhoto.dll
2009-06-02 02:43:17 ----A---- C:\Windows\system32\WebClnt.dll
2009-06-02 02:43:17 ----A---- C:\Windows\system32\msexcl40.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\vssapi.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\slwmi.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\msxbde40.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\comsvcs.dll
2009-06-02 02:43:15 ----A---- C:\Windows\system32\mstscax.dll
2009-06-02 02:43:15 ----A---- C:\Windows\system32\authui.dll
2009-06-02 02:43:14 ----A---- C:\Windows\system32\PresentationHost.exe
2009-06-02 02:43:14 ----A---- C:\Windows\system32\NetProjW.dll
2009-06-02 02:43:14 ----A---- C:\Windows\system32\msrepl40.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\propsys.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\newdev.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\iasrecst.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\gpsvc.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\eudcedit.exe
2009-06-02 02:43:13 ----A---- C:\Windows\system32\crypt32.dll
2009-06-02 02:43:13 ----A---- C:\Windows\explorer.exe
2009-06-02 02:43:12 ----A---- C:\Windows\system32\setupapi.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\rpcss.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\mspbde40.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\davclnt.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\d3d9.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\wevtapi.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\shlwapi.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\msrd3x40.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\msltus40.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\msdtctm.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\mfc42.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\browseui.dll
2009-06-02 02:43:10 ----A---- C:\Windows\system32\user32.dll
2009-06-02 02:43:10 ----A---- C:\Windows\system32\photowiz.dll
2009-06-02 02:43:10 ----A---- C:\Windows\system32\nlhtml.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\win32spl.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\samsrv.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\quartz.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\oleaut32.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\ci.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\winhttp.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-06-02 02:43:08 ----A---- C:\Windows\system32\netshell.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\msv1_0.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\kerberos.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\IKEEXT.DLL
2009-06-02 02:43:08 ----A---- C:\Windows\system32\compcln.exe
2009-06-02 02:43:08 ----A---- C:\Windows\system32\apds.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\xmlfilter.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\mswstr10.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\msctf.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\emdmgmt.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\audiosrv.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\VSSVC.exe
2009-06-02 02:43:06 ----A---- C:\Windows\system32\sqlsrv32.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\SLUI.exe
2009-06-02 02:43:06 ----A---- C:\Windows\system32\QAGENTRT.DLL
2009-06-02 02:43:06 ----A---- C:\Windows\system32\msvcrt.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\msrd2x40.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\mfc42u.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\gdi32.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\eapphost.dll
2009-06-02 02:43:05 ----A---- C:\Windows\system32\winresume.exe
2009-06-02 02:43:05 ----A---- C:\Windows\system32\propdefs.dll
2009-06-02 02:43:05 ----A---- C:\Windows\system32\odbc32.dll
2009-06-02 02:43:04 ----A---- C:\Windows\system32\wevtutil.exe
2009-06-02 02:43:04 ----A---- C:\Windows\system32\shdocvw.dll
2009-06-02 02:43:04 ----A---- C:\Windows\system32\mssitlb.dll
2009-06-02 02:43:04 ----A---- C:\Windows\system32\dbgeng.dll
2009-06-02 02:43:03 ----A---- C:\Windows\system32\WsmSvc.dll
2009-06-02 02:43:03 ----A---- C:\Windows\system32\swprv.dll
2009-06-02 02:43:03 ----A---- C:\Windows\system32\mmcndmgr.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\vds.exe
2009-06-02 02:43:02 ----A---- C:\Windows\system32\usp10.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\schannel.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\netlogon.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\msscb.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\msctfp.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\drvinst.exe
2009-06-02 02:43:02 ----A---- C:\Windows\system32\devmgr.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\BFE.DLL
2009-06-02 02:43:02 ----A---- C:\Windows\system32\adsldpc.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\WSDApi.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\WMVSDECD.DLL
2009-06-02 02:43:01 ----A---- C:\Windows\system32\Wldap32.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\wcnwiz.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\services.exe
2009-06-02 02:43:01 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\evr.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\wercon.exe
2009-06-02 02:43:00 ----A---- C:\Windows\system32\wcncsvc.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\msdtcprx.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\msdrm.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\mimefilt.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\comdlg32.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\certcli.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\adtschema.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\taskeng.exe
2009-06-02 02:42:59 ----A---- C:\Windows\system32\rtffilt.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\reg.exe
2009-06-02 02:42:59 ----A---- C:\Windows\system32\mswdat10.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\msjter40.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\ipsmsnap.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\dnsapi.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\certutil.exe
2009-06-02 02:42:58 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-06-02 02:42:58 ----A---- C:\Windows\system32\w32time.dll
2009-06-02 02:42:58 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-06-02 02:42:57 ----A---- C:\Windows\system32\TsWpfWrp.exe
2009-06-02 02:42:57 ----A---- C:\Windows\system32\rsaenh.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msstrc.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msshooks.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msscntrs.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msihnd.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\MMDevAPI.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\bthserv.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\bcrypt.dll
2009-06-02 02:42:56 ----A---- C:\Windows\system32\inetcomm.dll
2009-06-02 02:42:54 ----A---- C:\Windows\system32\netapi32.dll
2009-06-02 02:42:54 ----A---- C:\Windows\system32\inetpp.dll
2009-06-02 02:42:54 ----A---- C:\Windows\system32\dfshim.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\wmicmiplugin.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\termsrv.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\profsvc.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\mtxclu.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\mscories.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\hidserv.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\gameux.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\fundisc.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\cryptsvc.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\wdc.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\shsvcs.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\msiexec.exe
2009-06-02 02:42:52 ----A---- C:\Windows\system32\imapi.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\chsbrkr.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\spoolsv.exe
2009-06-02 02:42:51 ----A---- C:\Windows\system32\rasmans.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\pnidui.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\icardres.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\iassdo.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\autofmt.exe
2009-06-02 02:42:50 ----A---- C:\Windows\system32\wersvc.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\slmgr.vbs
2009-06-02 02:42:50 ----A---- C:\Windows\system32\scrrun.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\PSHED.DLL
2009-06-02 02:42:50 ----A---- C:\Windows\system32\pidgenx.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\pdh.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\CertEnrollUI.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\azroles.dll
2009-06-02 02:42:49 ----A---- C:\Windows\system32\wmpmde.dll
2009-06-02 02:42:49 ----A---- C:\Windows\system32\winlogon.exe
2009-06-02 02:42:49 ----A---- C:\Windows\system32\SyncCenter.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\SLUINotify.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\ncrypt.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\msjetoledb40.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\comuid.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\certmgr.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\wisptis.exe
2009-06-02 02:42:47 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\untfs.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\taskcomp.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\spp.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\sethc.exe
2009-06-02 02:42:47 ----A---- C:\Windows\system32\scrobj.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\rtutils.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\kd1394.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\iassam.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\dwm.exe
2009-06-02 02:42:46 ----A---- C:\Windows\system32\iasnap.dll
2009-06-02 02:42:46 ----A---- C:\Windows\system32\autochk.exe
2009-06-02 02:42:45 ----A---- C:\Windows\system32\winsrv.dll
2009-06-02 02:42:45 ----A---- C:\Windows\system32\printui.dll
2009-06-02 02:42:45 ----A---- C:\Windows\system32\kdcom.dll
2009-06-02 02:42:45 ----A---- C:\Windows\system32\cscript.exe
2009-06-02 02:42:45 ----A---- C:\Windows\system32\autoconv.exe
2009-06-02 02:42:44 ----A---- C:\Windows\system32\wow32.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\userenv.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\osk.exe
2009-06-02 02:42:44 ----A---- C:\Windows\system32\onex.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\mswsock.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\basecsp.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\audiodg.exe
2009-06-02 02:42:43 ----A---- C:\Windows\system32\WinSCard.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\winmm.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\WerFaultSecure.exe
2009-06-02 02:42:43 ----A---- C:\Windows\system32\spcmsg.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\RelMon.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\rdpencom.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\offfilt.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\msftedit.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\kdusb.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\wsepno.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\WerFault.exe
2009-06-02 02:42:42 ----A---- C:\Windows\system32\Utilman.exe
2009-06-02 02:42:42 ----A---- C:\Windows\system32\stobject.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\secproc_ssp.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\mfplat.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\diskraid.exe
2009-06-02 02:42:41 ----A---- C:\Windows\system32\wscript.exe
2009-06-02 02:42:41 ----A---- C:\Windows\system32\wiaservc.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\ulib.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\sysclass.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\SndVol.exe
2009-06-02 02:42:41 ----A---- C:\Windows\system32\secur32.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\prnntfy.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\odbccp32.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\msnetobj.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\mscms.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\mcmde.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\iasdatastore.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\apphelp.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\adsmsext.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\wscntfy.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\wlansvc.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\wlangpui.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\rastapi.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\pnpsetup.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\ipsecsnp.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2009-06-02 02:42:40 ----A---- C:\Windows\system32\fdProxy.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\dsound.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\diskpart.exe
2009-06-02 02:42:40 ----A---- C:\Windows\system32\cryptui.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\brcpl.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\wusa.exe
2009-06-02 02:42:39 ----A---- C:\Windows\system32\wscsvc.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\WMVENCOD.DLL
2009-06-02 02:42:39 ----A---- C:\Windows\system32\vdsdyn.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\regsvc.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\rastls.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\rasapi32.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\ntprint.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\netiohlp.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\mscorier.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\logman.exe
2009-06-02 02:42:39 ----A---- C:\Windows\system32\iasrad.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\iashlpr.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\gpapi.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\zipfldr.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\wshext.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\wpccpl.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\wer.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\rasdlg.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\netcenter.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\iassvcs.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\findstr.exe
2009-06-02 02:42:37 ----A---- C:\Windows\system32\wsnmp32.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\uxsms.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\themecpl.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\srvsvc.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\mssprxy.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\tsbyuv.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\slcc.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\scansetting.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\powrprof.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\ntmarta.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\msutb.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\mstsc.exe
2009-06-02 02:42:36 ----A---- C:\Windows\system32\mstlsapi.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\iasads.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\wlanhlp.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\sud.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\powercpl.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\newdev.exe
2009-06-02 02:42:35 ----A---- C:\Windows\system32\networkmap.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\iasacct.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\dot3svc.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\connect.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\authz.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\themeui.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\systemcpl.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\samlib.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\pcaui.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\mmci.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\accessibilitycpl.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\wlanpref.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\usercpl.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\rpchttp.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\qdvd.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\autoplay.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\wpcao.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\vdsutil.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\tapisrv.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\scksp.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\scesrv.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\regapi.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\oleprn.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\msinfo32.exe
2009-06-02 02:42:32 ----A---- C:\Windows\system32\mpr.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\feclient.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\AudioSes.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\wscisvif.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\sdclt.exe
2009-06-02 02:42:31 ----A---- C:\Windows\system32\rekeywiz.exe
2009-06-02 02:42:31 ----A---- C:\Windows\system32\ncryptui.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\imm32.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\iaspolcy.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\Faultrep.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\dpapimig.exe
2009-06-02 02:42:31 ----A---- C:\Windows\system32\dot3msm.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\DeviceEject.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\whealogr.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\TSTheme.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\tcpmon.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\spwinsat.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\scecli.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\rasplap.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\rasgcw.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\qedit.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\PnPUnattend.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\pnpui.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\perfdisk.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\hdwwiz.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2009-06-02 02:42:30 ----A---- C:\Windows\system32\fdWSD.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\cmmon32.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\certreq.exe
2009-06-02 02:42:29 ----A---- C:\Windows\system32\srcore.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\SnippingTool.exe
2009-06-02 02:42:29 ----A---- C:\Windows\system32\SCardSvr.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\raschap.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\MSVidCtl.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\fontext.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\conime.exe
2009-06-02 02:42:29 ----A---- C:\Windows\system32\cmdial32.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\WMVXENCD.DLL
2009-06-02 02:42:28 ----A---- C:\Windows\system32\wlanui.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\wlanmsm.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\wiaaut.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\shwebsvc.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\rasppp.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\PnPutil.exe
2009-06-02 02:42:28 ----A---- C:\Windows\system32\oobefldr.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\dsprop.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\dimsroam.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\wmdrmsdk.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\shsetup.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\rasmontr.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\mscandui.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\modemui.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\dataclen.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\chtbrkr.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\WSDMon.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\wmpeffects.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\wlgpclnt.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\smss.exe
2009-06-02 02:42:26 ----A---- C:\Windows\system32\rdpwsx.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\netplwiz.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\credui.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\certprop.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\blackbox.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\wscapi.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\wpcsvc.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\thawbrkr.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\softkbd.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\sendmail.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\networkexplorer.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\msscp.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\msimtf.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\logagent.exe
2009-06-02 02:42:25 ----A---- C:\Windows\system32\InkEd.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\ifmon.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\gpresult.exe
2009-06-02 02:42:25 ----A---- C:\Windows\system32\cipher.exe
2009-06-02 02:42:24 ----A---- C:\Windows\system32\olepro32.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\msctfui.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\drmmgrtn.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\dmsynth.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\wshbth.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\version.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\SLLUA.exe
2009-06-02 02:42:23 ----A---- C:\Windows\system32\puiapi.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\msisip.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\mprapi.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\input.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\fc.exe
2009-06-02 02:42:23 ----A---- C:\Windows\system32\ExplorerFrame.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\cdd.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\msjint40.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\l2nacp.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\ftp.exe
2009-06-02 02:42:22 ----A---- C:\Windows\system32\fdSSDP.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\eapp3hst.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\dmusic.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\cscapi.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\wsdchngr.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\tscupgrd.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\Storprop.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\SMBHelperClass.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\slcinst.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\rrinstaller.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\rasdial.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\rasdiag.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\networkitemfactory.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\mfps.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\ipconfig.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\fdWCN.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\eappcfg.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\dot3cfg.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\cscdll.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\bthudtask.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\bthci.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\aaclient.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\ocsetup.exe
2009-06-02 02:42:20 ----A---- C:\Windows\system32\nslookup.exe
2009-06-02 02:42:20 ----A---- C:\Windows\system32\mmcico.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\mfpmp.exe
2009-06-02 02:42:20 ----A---- C:\Windows\system32\hbaapi.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\fdeploy.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\eappgnui.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\tsgqec.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\PNPXAssoc.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\iscsilog.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\gpupdate.exe
2009-06-02 02:42:19 ----A---- C:\Windows\system32\csrstub.exe
2009-06-02 02:42:19 ----A---- C:\Windows\system32\cbsra.exe
2009-06-02 02:42:19 ----A---- C:\Windows\system32\bitsigd.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\atmlib.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\winrnr.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\vdmdbg.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\slwga.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\odbcconf.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\NcdProp.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\midimap.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\inetppui.dll
2009-06-02 02:42:17 ----A---- C:\Windows\system32\spwmp.dll
2009-06-02 02:42:16 ----A---- C:\Windows\system32\wmploc.DLL
2009-06-02 02:42:16 ----A---- C:\Windows\system32\dxmasf.dll
2009-06-02 02:42:15 ----A---- C:\Windows\system32\msimsg.dll
2009-06-02 02:42:15 ----A---- C:\Windows\system32\mferror.dll
2009-06-02 02:42:15 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-06-02 02:42:01 ----A---- C:\Windows\system32\SmiEngine.dll
2009-06-02 02:41:58 ----A---- C:\Windows\system32\wdscore.dll
2009-06-02 02:41:58 ----A---- C:\Windows\system32\PkgMgr.exe
2009-06-02 02:41:54 ----A---- C:\Windows\system32\drvstore.dll
2009-06-01 13:44:24 ----A---- C:\Windows\unvise32qt.exe
2009-06-01 13:43:32 ----D---- C:\Windows\system32\QuickTime
2009-06-01 13:43:32 ----D---- C:\Program Files\QuickTime
2009-06-01 13:41:24 ----D---- C:\ProgramData\QuickTime
2009-06-01 13:22:26 ----A---- C:\VarInit.txt
2009-06-01 13:22:25 ----A---- C:\UtdInfo.txt
2009-05-28 15:11:47 ----D---- C:\Program Files\RegCure
2009-05-24 20:34:40 ----D---- C:\Program Files\Microsoft Student
2009-05-24 20:33:31 ----D---- C:\Program Files\Learning Essentials
2009-05-24 20:33:15 ----A---- C:\Windows\system32\xinput1_1.dll
2009-05-24 20:33:09 ----A---- C:\Windows\system32\d3dx9_30.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_29.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_28.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_27.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_26.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_25.dll
2009-05-24 20:33:07 ----A---- C:\Windows\system32\d3dx9_24.dll
2009-05-24 20:17:41 ----D---- C:\Encarta
2009-05-23 12:43:20 ----D---- C:\Users\Saweer\AppData\Roaming\SpinTop
2009-05-23 12:37:13 ----D---- C:\Users\Saweer\AppData\Roaming\PoolSharks
2009-05-22 17:22:49 ----D---- C:\Program Files\EyeOfHorus
2009-05-09 13:35:51 ----D---- C:\ProgramData\Rising
2009-05-09 13:35:12 ----D---- C:\Program Files\Rising
2009-05-09 05:01:51 ----AD---- C:\ProgramData\TEMP
2009-05-09 04:52:58 ----D---- C:\Program Files\removeit
2009-05-07 02:15:21 ----D---- C:\Users\Saweer\AppData\Roaming\uTorrent
2009-05-06 02:38:32 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2009-05-06 02:38:10 ----D---- C:\Users\Saweer\AppData\Roaming\SUPERAntiSpyware.com
2009-05-06 02:38:10 ----D---- C:\Program Files\SUPERAntiSpyware
2009-05-06 02:26:42 ----D---- C:\Program Files\Marxio Timer
2009-05-05 19:05:40 ----A---- C:\Windows\system32\mcophokdll.dll
2009-05-05 19:05:40 ----A---- C:\Windows\system32\mcophokapp.exe
2009-05-01 18:31:33 ----D---- C:\Program Files\Perfect Alarm Clock
2009-05-01 15:04:01 ----D---- C:\Program Files\Equanimity
2009-05-01 13:51:01 ----A---- C:\Windows\system32\mshtmler.dll
2009-05-01 13:51:01 ----A---- C:\Windows\system32\mshtmled.dll
2009-05-01 13:51:01 ----A---- C:\Windows\system32\icardie.dll
2009-05-01 13:51:01 ----A---- C:\Windows\system32\admparse.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\msls31.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\imgutil.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\ieakeng.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\dxtmsft.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\corpol.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\webcheck.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\occache.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\msrating.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\licmgr10.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\inseng.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\iepeers.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\ieaksie.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\dxtrans.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-05-01 13:50:58 ----A---- C:\Windows\system32\wextract.exe
2009-05-01 13:50:58 ----A---- C:\Windows\system32\vbscript.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\pngfilt.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\mstime.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\msfeedssync.exe
2009-05-01 13:50:58 ----A---- C:\Windows\system32\msfeeds.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\jscript.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\ieapfltr.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\ieakui.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\advpack.dll
2009-05-01 13:50:57 ----A---- C:\Windows\system32\url.dll
2009-05-01 13:50:57 ----A---- C:\Windows\system32\mshta.exe
2009-05-01 13:50:57 ----A---- C:\Windows\system32\iexpress.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\SetDepNx.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\PDMSetup.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\ieUnatt.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\iesysprep.dll

======List of files/folders modified in the last 3 months======

2009-07-22 18:08:32 ----D---- C:\Windows\Prefetch
2009-07-22 18:08:25 ----D---- C:\Windows\Temp
2009-07-22 18:01:49 ----D---- C:\Windows\tracing
2009-07-22 17:59:57 ----D---- C:\Program Files\Microsoft Silverlight
2009-07-22 17:59:42 ----D---- C:\Windows\system32\drivers
2009-07-22 17:59:42 ----D---- C:\Windows
2009-07-22 16:14:38 ----SHD---- C:\System Volume Information
2009-07-22 15:37:53 ----D---- C:\Windows\system32\catroot
2009-07-22 15:37:48 ----D---- C:\Windows\inf
2009-07-22 15:34:01 ----D---- C:\Windows\winsxs
2009-07-22 15:34:00 ----D---- C:\Program Files\Internet Explorer
2009-07-22 15:33:28 ----SHD---- C:\Windows\Installer
2009-07-22 15:01:42 ----HD---- C:\ProgramData
2009-07-22 15:01:42 ----D---- C:\Program Files
2009-07-21 23:58:03 ----D---- C:\Windows\System32
2009-07-21 23:58:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-07-21 20:33:40 ----D---- C:\ProgramData\NVIDIA
2009-07-21 20:13:54 ----D---- C:\Windows\system32\catroot2
2009-07-21 20:10:56 ----D---- C:\SwSetup
2009-07-21 08:28:17 ----D---- C:\Windows\Tasks
2009-07-21 08:28:06 ----D---- C:\Windows\system32\Tasks
2009-07-21 02:54:08 ----D---- C:\ProgramData\CyberLink
2009-07-21 02:53:52 ----D---- C:\Users\Saweer\AppData\Roaming\CyberLink
2009-07-21 02:32:40 ----D---- C:\Program Files\IDT
2009-07-19 21:38:44 ----D---- C:\Windows\system32\config
2009-07-19 21:38:42 ----D---- C:\Windows\panther
2009-07-19 21:38:41 ----D---- C:\Windows\Debug
2009-07-19 01:28:47 ----D---- C:\Windows\system32\zh-TW
2009-07-19 01:28:47 ----D---- C:\Windows\system32\zh-CN
2009-07-19 01:28:47 ----D---- C:\Windows\system32\sv-SE
2009-07-19 01:28:47 ----D---- C:\Windows\system32\ru-RU
2009-07-19 01:28:47 ----D---- C:\Windows\system32\pt-BR
2009-07-19 01:28:47 ----D---- C:\Windows\system32\pl-PL
2009-07-19 01:28:47 ----D---- C:\Windows\system32\nl-NL
2009-07-19 01:28:47 ----D---- C:\Windows\system32\nb-NO
2009-07-19 01:28:46 ----D---- C:\Windows\system32\ko-KR
2009-07-19 01:28:46 ----D---- C:\Windows\system32\ja-JP
2009-07-19 01:28:46 ----D---- C:\Windows\system32\it-IT
2009-07-19 01:28:46 ----D---- C:\Windows\system32\fr-FR
2009-07-19 01:28:45 ----D---- C:\Windows\system32\fi-FI
2009-07-19 01:28:45 ----D---- C:\Windows\system32\es-ES
2009-07-19 01:28:45 ----D---- C:\Windows\system32\en-US
2009-07-19 01:28:45 ----D---- C:\Windows\system32\de-DE
2009-07-19 01:28:45 ----D---- C:\Windows\system32\da-DK
2009-07-18 23:13:24 ----RSD---- C:\Windows\Fonts
2009-07-18 23:11:23 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-18 23:11:18 ----D---- C:\Program Files\HP
2009-07-18 17:07:55 ----D---- C:\Program Files\Hewlett-Packard
2009-07-18 16:30:41 ----D---- C:\Program Files\Common Files
2009-07-18 02:16:58 ----RSD---- C:\Windows\assembly
2009-07-18 01:08:34 ----D---- C:\Program Files\Winamp
2009-07-16 16:24:59 ----SD---- C:\Windows\Downloaded Program Files
2009-07-15 16:29:05 ----D---- C:\Program Files\Windows Mail
2009-07-14 03:17:01 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2009-07-14 03:16:03 ----D---- C:\Program Files\DVDVideoSoft
2009-07-11 14:46:10 ----D---- C:\Program Files\Mozilla Firefox
2009-07-11 14:45:28 ----D---- C:\Windows\SMINST
2009-07-11 14:45:25 ----D---- C:\Program Files\A-1 Image 4.20
2009-07-07 18:10:56 ----A---- C:\Windows\system32\mrt.exe
2009-07-05 19:06:38 ----D---- C:\Windows\registration
2009-06-30 22:28:22 ----D---- C:\Program Files\Google
2009-06-29 01:47:43 ----D---- C:\Users\Saweer\AppData\Roaming\IObit
2009-06-28 23:52:51 ----D---- C:\Windows\Microsoft.NET
2009-06-28 01:03:21 ----D---- C:\Program Files\Common Files\microsoft shared
2009-06-27 20:32:51 ----D---- C:\Users\Saweer\AppData\Roaming\COWON
2009-06-27 01:21:15 ----D---- C:\Program Files\Java
2009-06-27 00:05:16 ----D---- C:\Windows\Logs
2009-06-26 22:52:37 ----D---- C:\Windows\Cursors
2009-06-26 22:42:51 ----D---- C:\Windows\LiveKernelReports
2009-06-24 02:04:56 ----D---- C:\Windows\system32\LogFiles
2009-06-10 03:29:16 ----D---- C:\Windows\ehome
2009-06-10 03:29:15 ----D---- C:\Windows\system32\migration
2009-06-10 03:10:14 ----D---- C:\Program Files\Microsoft Works
2009-06-10 03:08:56 ----D---- C:\ProgramData\Microsoft Help
2009-06-10 03:08:10 ----A---- C:\Windows\win.ini
2009-06-05 22:25:54 ----SD---- C:\Users\Saweer\AppData\Roaming\Microsoft
2009-06-02 03:23:31 ----D---- C:\Windows\rescache
2009-06-02 03:11:15 ----SHD---- C:\boot
2009-06-02 03:03:53 ----D---- C:\Program Files\Windows Calendar
2009-06-02 03:03:52 ----D---- C:\Program Files\Movie Maker
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Sidebar
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Media Player
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Journal
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Collaboration
2009-06-02 03:03:47 ----D---- C:\Program Files\Windows Photo Gallery
2009-06-02 03:03:47 ----D---- C:\Program Files\Common Files\System
2009-06-02 03:03:43 ----D---- C:\Windows\servicing
2009-06-02 03:03:43 ----D---- C:\Program Files\Windows Defender
2009-06-02 03:03:30 ----D---- C:\Windows\system32\XPSViewer
2009-06-02 03:03:30 ----D---- C:\Windows\system32\sk-SK
2009-06-02 03:03:30 ----D---- C:\Windows\system32\lv-LV
2009-06-02 03:03:30 ----D---- C:\Windows\system32\hr-HR
2009-06-02 03:03:30 ----D---- C:\Windows\system32\et-EE
2009-06-02 03:03:30 ----D---- C:\Windows\IME
2009-06-02 03:03:28 ----D---- C:\Windows\system32\oobe
2009-06-02 03:03:28 ----D---- C:\Windows\system32\el-GR
2009-06-02 03:03:23 ----D---- C:\Windows\system32\setup
2009-06-02 03:03:23 ----D---- C:\Windows\system32\he-IL
2009-06-02 03:03:23 ----D---- C:\Windows\system32\AdvancedInstallers
2009-06-02 03:03:22 ----D---- C:\Windows\system32\uk-UA
2009-06-02 03:03:22 ----D---- C:\Windows\system32\sr-Latn-CS
2009-06-02 03:03:22 ----D---- C:\Windows\system32\SLUI
2009-06-02 03:03:22 ----D---- C:\Windows\system32\sl-SI
2009-06-02 03:03:22 ----D---- C:\Windows\system32\ro-RO
2009-06-02 03:03:22 ----D---- C:\Windows\system32\pt-PT
2009-06-02 03:03:22 ----D---- C:\Windows\system32\manifeststore
2009-06-02 03:03:22 ----D---- C:\Windows\system32\hu-HU
2009-06-02 03:03:22 ----D---- C:\Windows\system32\en
2009-06-02 03:03:22 ----D---- C:\Windows\system32\cs-CZ
2009-06-02 03:03:22 ----D---- C:\Windows\system32\bg-BG
2009-06-02 03:03:21 ----D---- C:\Windows\system32\th-TH
2009-06-02 03:03:20 ----D---- C:\Windows\system32\wbem
2009-06-02 03:03:20 ----D---- C:\Windows\system32\tr-TR
2009-06-02 03:03:18 ----D---- C:\Windows\system32\lt-LT
2009-06-02 03:03:18 ----D---- C:\Windows\system32\ar-SA
2009-06-02 03:03:17 ----D---- C:\Windows\system32\migwiz
2009-06-02 03:02:41 ----D---- C:\Windows\AppPatch
2009-06-02 03:02:34 ----D---- C:\Windows\system32\Boot
2009-06-01 13:22:24 ----D---- C:\Program Files\Common Files\InstallShield
2009-05-24 20:38:04 ----SD---- C:\ProgramData\Microsoft
2009-05-07 22:26:36 ----D---- C:\Windows\ModemLogs
2009-05-04 20:34:15 ----D---- C:\Windows\system32\spool
2009-05-01 18:39:03 ----A---- C:\Windows\ss3unstl.exe
2009-05-01 18:38:39 ----A---- C:\Windows\unins000.exe
2009-05-01 18:29:48 ----A---- C:\Windows\wbfaone.ini
2009-05-01 18:23:07 ----D---- C:\Windows\a1imagesaver
2009-05-01 14:05:31 ----D---- C:\Windows\PolicyDefinitions
2009-04-28 20:51:45 ----D---- C:\Windows\system32\WDI
2009-04-25 14:28:15 ----D---- C:\Games

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-04-28 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]
R2 Aspi32;Aspi32; C:\Windows\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-04-28 55640]
R2 RMCAST;RMCAST (Pgm) Protocol Driver; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-04-11 113664]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2008-08-07 34608]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-10-23 1331192]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-06-23 80424]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-06-23 81960]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-06-23 16168]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-09-04 54784]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-19 16768]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-04-17 114528]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-08-06 44576]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-09-13 7391392]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2009-05-25 164864]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2008-09-11 389120]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-06-20 200112]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 ALSysIO;ALSysIO; \??\C:\Users\Saweer\AppData\Local\Temp\ALSysIO.sys []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-10-23 1331192]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-02-06 55280]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\aestsrv.exe [2008-06-27 77824]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2008-03-18 13312]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-06-10 185089]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2008-08-07 24880]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-04-16 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-01-27 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-09-13 196608]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2009-01-12 292216]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2009-01-12 116080]
R2 Recovery Service for Windows;Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [2008-03-27 341328]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\STacSV.exe [2008-09-11 237650]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-02-07 193840]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-01-26 148832]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S2 gupdate1c992f9716bca36;Google Update Service (gupdate1c992f9716bca36); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-20 133104]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 fsssvc;Windows Live Family Safety; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-08 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-27 145184]

-----------------EOF-----------------

by **sahem** » July 22nd, 2009, 11:22 am

the temp right now is 57 but sometimes it go up to 70 or more and the keyboard feels really hot
that freaks me out :shock:

by **Shaba** » July 22nd, 2009, 11:36 am

That is somewhat normal if your room is hot. How old is your laptop?

by **sahem** » July 22nd, 2009, 11:47 am

my laptop is new I bought it 6 months ago
it's HP Pavilion dv5-1116em
it a nice piece of work
but since day 1 I have this overheating problem
the vents are open and I never place it on a wrong place
three months ago it started to get slow and lazy
this is killin me :?:

by **sahem** » July 22nd, 2009, 11:50 am

I forgot to till you that I always use the power saver plan
but when I use the high performance power plan
the temp never be less than 65 :pale:

by **Shaba** » July 22nd, 2009, 12:22 pm

That sounds normal as it will function at full speed when in high performance power plan and create more heat as well.

If you want it to be cooler, then you should use power saver plan.

I can suggest which startup programs you can disable if you like to?

by **sahem** » July 22nd, 2009, 12:38 pm

could you please do that
but first you should till me how to diable them
by the way, guyz you are cool
but I have a personal quistion, you are doing a great job and it takes alot of time, if this is for free, then who pays for you??
if I were a milionair I would donate 10% of what I have to you and your site( no kiddin), but unfortiunatelly I'm not :blackeye:

by **Shaba** » July 22nd, 2009, 1:38 pm

No one pays us, this is volunteer service

You can disable these with HijackThis (Open hijackThis, click do a system scan only and checkmark those.
Close all windows including browser and press fix checked).

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Saweer\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

Reboot and post back a fresh rsit log, please.

Free Malware Removal Forum

thank u 4 ur nice work my laptop is gettin slow and overheat

thank u 4 ur nice work my laptop is gettin slow and overheat

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

this is log.txt

this is info.txt

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

mbam log directly after it finished scaning

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

and this is the RSIT log

It's temp at the moment is 57

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

reply

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

Re: thank u 4 ur nice work my laptop is gettin slow and overheat

Who is online